CVE-2011-1281

CVE-2011-1281 affects the Client/Server Run-time Subsystem (CSRSS) in the Win32 subsystem across multiple Windows versions: Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2 and Windows 7 Gold/SP1. The issue stems from AllocConsole() handling when...

CVE-2013-1292

CVE-2013-1292 is a Windows kernel-mode driver vulnerability: a race condition in Win32k.sys that can allow local privilege escalation by a crafted application due to improper handling of objects in memory. Affected platforms include Windows Vista SP2, Windows Server 2008 SP2 (and R2, R2 SP1), Win...

CVE-2013-2556

CVE-2013-2556 is an ASLR bypass vulnerability in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). The issue allows bypassing ASLR protections via unspecified vectors, with demonstrations against Adobe Flash Player by VUPEN during CanSecWest 2013. The CVSS v2 base sco...

CVE-2015-2462

CVE-2015-2462 is an OpenType font parsing vulnerability in Windows’ Adobe Type Manager Library (ATMFD.DLL). The weakness allows remote code execution when a crafted OpenType font is processed by affected Windows builds. The affected platforms include Windows Vista SP2, Windows Server 2008 SP2/R2,...

CVE-2015-2476

CVE-2015-2476 affects the WebDAV client in Windows platforms (e.g., Vista SP2, Server 2008 SP2/R2, Windows 7, 8/8.1, Server 2012/R2, Windows RT) where SSL 2.0 is supported. The root cause is the ability for a remote attacker to conduct a decryption attack/Information Disclosure via MITM by downgr...

CVE-2016-0175

The CVE-2016-0175 issue is a Win32k Information Disclosure vulnerability in the Windows kernel that allows a local attacker to obtain the memory addresses of kernel objects, enabling a KASLR bypass. The vulnerability affects multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1,...

CVE-2016-7215

CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...

CVE-2017-0122

Technical details for CVE-2017-0122 are not provided in the initial or connected documents; only references to MSRC advisories and related Uniscribe CVEs are present. Monitor for updates.

CVE-2017-8475

Technical details about CVE-2017-8475 are not publicly available in the provided connected documents. The EUVD entries mention malware unrelated to concrete exploit details. Monitor for updates.

CVE-2018-1004

Technical details for CVE-2018-1004 (VBScript engine remote code execution) are not provided in the connected documents. Public details (affected versions, root cause, exploitability, fixes) are not available here. Monitor for updates and consult primary sources for specifics.

CVE-2019-1478

CVE-2019-1478 is a Windows elevation-of-privilege vulnerability caused by improper handling of COM object creation in Windows COM Server. A local attacker who can log on could exploit a specially crafted application to execute arbitrary code with elevated privileges by taking control of the affec...

CVE-2020-1141

Technical details for CVE-2020-1141 are not publicly available in the provided documents. No explicit affected components, root cause, or fixes are stated here. Monitor for updates from official advisories.

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

CVE-2021-26896

CVE-2021-26896 is a Windows DNS Server denial-of-service vulnerability. The NVD entry characterizes it as a network-accessible issue with no authentication or user interaction required, causing an availability impact (A) and a base score of 7.5 (HIGH) under CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N...

CVE-2024-43506

CVE-2024-43506 refers to a Microsoft Windows BranchCache Denial-of-Service vulnerability. The available OpenVAS/NVD context indicates the issue is a network-exploitable DoS (CVSS 3.1: 7.5) affecting Windows BranchCache, with no user interaction required and no privilege escalation per the given d...

CVE-2024-43622

CVE-2024-43622 is a Windows Telephony Service remote code execution vulnerability. According to NCSC guidance, it is associated with an 8.8/High severity score (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating network access without authentication is sufficient and user interaction is r...

CVE-2025-21220

CVE-2025-21220 is a Microsoft Message Queuing information disclosure vulnerability that has concrete public details in multiple connected sources: the CVE is listed as affecting Windows Message Queuing with the impact described as “Accessing Sensitive Data” and a CVSS basis of 7.5 (HIGH) indicati...

CVE-2025-21223

Technical details about CVE-2025-21223 are not provided in the supplied connected documents. The initial entry notes a Windows Telephony Service RCE, but no vendor/version/impact specifics are disclosed here. Monitor for future updates.

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2008-4038

CVE-2008-4038 describes a remote code execution vulnerability in Microsoft Windows SMB file-name handling (SMB buffer underflow). The issue affects multiple Windows versions (including Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista SP1, and Server 2008) and arises when a specially craft...

CVE-2010-0017

Summary: CVE-2010-0017 describes a race condition in the SMB client of Microsoft Windows, affecting Windows Vista (Gold, SP1, SP2), Windows Server 2008 (Gold/SP2) and Windows 7/Server 2008 R2. The vulnerability arises from how the SMB Negotiate response is handled, enabling remote code execution ...

CVE-2011-1282

CVE-2011-1282 affects the Windows Client/Server Run-time Subsystem (CSRSS) in the Win32 subsystem, where improper memory initialization leads to a NULL pointer in SrvSetConsoleLocalEUDC. This allows local users to gain privileges or cause memory corruption. Affected products include Windows XP (S...

CVE-2013-3940

CVE-2013-3940 is a Windows Graphics Device Interface (GDI) integer-overflow vulnerability affecting multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012/R2, Windows RT). The issue arises when processing specially cra...

CVE-2014-1824

CVE-2014-1824 affects Windows Journal remote code execution via a crafted .JNT journal file. Concrete details show impact on multiple Windows client/server platforms (Windows Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8/8.1; Windows Server 2012/2012 R2; Windows RT/RT 8.1). Root cause i...

CVE-2015-1722

CVE-2015-1722 is a use-after-free vulnerability in Windows kernel-mode drivers, specifically tied to the Kernel Bitmap Handling path. A crafted local application can exploit the flaw to escalate privileges from a local user to higher rights (e.g., SYSTEM) by corrupting kernel memory. Affected pro...

CVE-2015-2363

CVE-2015-2363 affects Windows kernel-mode graphics/driver component Win32k.sys, enabling local privilege escalation via a crafted application. Affected products include Windows Server 2003 SP2/R2 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server ...

CVE-2016-3249

The CVE-2016-3249 vulnerability is a Win32k Elevation of Privilege issue affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 Gold/1511. It arises from improper handling of objects in memory by kernel-mode drivers, enabling local...

CVE-2016-7216

CVE-2016-7216 affects Windows client/server platforms: Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The root cause is improper permission handling in the Windows Kernel API, enabling a local attacker to gain privileges via a crafted application. Documents describe a local...

CVE-2017-0088

CVE-2017-0088 is an Uniscribe (usp10.dll) remote-code-execution candidate affecting Windows Vista/7-era fonts rendering. Google Project Zero’s Uniscribe fuzzing found a crash path reported under CVE-2017-0088 in the chain leading to unsigned 2-byte write faults inside usp10!ttoGetTableData, origi...

CVE-2017-8469

Technical details for CVE-2017-8469 are not publicly available in the provided documents; no affected products, impact or fixes are specified beyond the high-level description. Monitor for updates.

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2017-8684

CVE-2017-8684 corresponds to a Windows kernel memory disclosure in win32k NtGdiGetFontResourceInfoInternalW. The vulnerability stems from writing kernel outputs to a user-provided buffer and then copying the entire requested size back to user mode, exposing uninitialized stack memory (≈92 bytes) ...

CVE-2018-8427

CVE-2018-8427 is an information-disclosure vulnerability in Microsoft Graphics Components that affects Microsoft Office family products (Office, Word Viewer, PowerPoint/Excel Viewers, Office 365 ProPlus) and related Windows components (Windows Server 2008). The root cause involves improper handli...

CVE-2019-0661

Technical details for CVE-2019-0661 are not publicly available in the provided connected documents; the initial entry summarizes the vulnerability as Windows kernel information disclosure. Monitor for updates.

CVE-2019-1048

CVE-2019-1048 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly discloses memory contents, enabling an attacker to obtain sensitive information to further compromise a system. The initial description notes feasible exploitation paths, such as convincing a...

CVE-2019-1415

CVE-2019-1415 affects Windows Installer and is described as an elevation-of-privilege vulnerability arising from how Windows Installer handles certain filesystem operations. The CVE entry notes that exploitation would require unprivileged code execution on the victim system (local access) with no...

CVE-2020-0715

Technical details for CVE-2020-0715 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1267

CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...

CVE-2023-36012

CVE-2023-36012 is a Windows DHCP Server information-disclosure vulnerability. Connected sources confirm the affected product area as Windows DHCP Server and provide a CVSS v3.1 base score of 5.3 (Medium) with vectors AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating a confidentiality impact of Low....

CVE-2024-38239

Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...

CVE-2024-43607

CVE-2024-43607 affects Windows Routing and Remote Access Service (RRAS). Vulnerability allows remote code execution over the network with no privileges and requires user interaction; CVSS v3.1 base score 8.8 (HIGH). Connected documents indicate RRAS-related fixes from Microsoft security updates (...

CVE-2025-21201

CVE-2025-21201 is cited by NCSC as a Windows Telephony Server remote code execution vulnerability with CVSS-like severity of 8.8 (high) andImpact described as executing random code. The connected NCSC advisory confirms the vulnerability exists in Windows Telephony Server and provides an explicit ...

CVE-2025-21240

CVE-2025-21240 is a Windows Telephony Service remote code execution vulnerability. The CIRCL sighting data lists Windows Telephony Service with CVSS 8.80 (High) and impact: Execute random code, consistent with the CVSS vector in the Initial Description (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21411

Technical details about CVE-2025-21411 are not provided in the connected documents. Public sources reference Windows Telephony Service Remote Code Execution, but this dataset contains no product/version/root-cause/fix specifics. Monitor for updates from MSRC and NVD.

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...

CVE-2025-62549

CVE-2025-62549 is a Windows RRAS Remote Code Execution vulnerability. The connected documents confirm an unauthenticated network exploit that allows code execution via RRAS component, with high impact and network access. Affected software is Windows RRAS services; root cause identified as an untr...

CVE-2012-0178

CVE-2012-0178 affects Windows Partition Manager (partmgr.sys) and stems from a race condition in handling device-relations requests. A crafted application that issues multiple simultaneous Plug and Play (PnP) Configuration Manager calls could allow local users to gain kernel-mode privileges on Wi...

CVE-2013-1278

CVE-2013-1278 describes a kernel race condition in Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. The vulnerability allows local privilege elevation via crafted objects in memory, as part o...

CVE-2014-1818

CVE-2014-1818 is a GDI+ image parsing vulnerability in Windows and Office components that allows remote code execution when a crafted EMF+ record is embedded in an image file. The affected products include multiple Windows versions (Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP...